PT-2026-1949 · Broadcom · Broadcom Dx Netops Spectrum

Published 2026-01-12 · Updated 2026-01-17 · CVE-2025-69274

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Broadcom DX NetOps Spectrum versions 24.3.10 and earlier

Description An authorization bypass exists due to a user-controlled key in Broadcom DX NetOps Spectrum on Windows and Linux, potentially leading to privilege escalation. The issue allows bypassing authorization mechanisms through manipulation of keys controlled by the user.

Recommendations Update to a version later than 24.3.10.

Fix

LPE

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-69274

Affected Products

Broadcom Dx Netops Spectrum

References · 6

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36756 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69274 · Security Note
• https://osv.dev/vulnerability/CVE-2025-69274 · Vendor Advisory
• https://twitter.com/CVEnew/status/2010582398107324454 · Twitter Post
• https://twitter.com/cracbot/status/2012480084821852611 · Twitter Post
• https://t.me/CVEtracker/41973 · Telegram Post